Firewall Wizards mailing list archives

Re: UDP Port 137 - Now TCP 143

From: Bill_Royds () pch gc ca
Date: Sat, 6 Feb 1999 22:32:21 -0500




John Burgess asked:


Thanks to all who responded regarding UDP port 137.  I learned some
interesting facts.  I got a new one this morning.  Does anyone know why
would someone/something be hitting TCP port 143?  This was at 2:30 AM
from bay-030-b5.codetel.net.do (206.105.238.30 - Dominican Republic - a
router?) Protocol=TCP Port 2734->143?

JB





  Port 143/tcp is IMAP. THere are several known vulnerabilities with some IMAP
servers that he may be trying to exploit.

Current thread:

UDP Port 137 - Now TCP 143 Burgess, John (EDS) (Feb 06)
- Re: UDP Port 137 - Now TCP 143 Lorens Kockum (Feb 08)
  - Re: UDP Port 137 - Now TCP 143 John Ladwig (Feb 09)
- Re: UDP Port 137 - Now TCP 143 Cristiano Lincoln Mattos (Feb 08)
- Re: UDP Port 137 - Now TCP 143 Randy Witlicki (Feb 08)
- Re: UDP Port 137 - Now TCP 143 Daniel J. Gregor Jr. (Feb 08)
- Re: UDP Port 137 - Now TCP 143 Michael T. Shinn (Feb 09)
- <Possible follow-ups>
- Re: UDP Port 137 - Now TCP 143 Bill_Royds (Feb 08)
  - Re: UDP Port 137 - Now TCP 143 David Gillett (Feb 10)
    - RE: UDP Port 137 - Now TCP 143 David Bovee (Feb 11)